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(54) Title: METHOD AND DEVICE FOR LOADING A USER INTERFACE 
(57) Abstract 

The invention concerns a method for loading a user interface 
in a television system comprising a decoder and a removable smart Card detection- 

card cooperating with said decoder, said decoder comprising a main 
user interface. The method comprises the steps of loading and 
storing by the decoder of the totality of a user interface module 
stored on said smart card, said user interface module comprising 
data structures making reference to infomnation destined to a user, 
said information being stored on said smart card, establishing by 
said decoder a relation between said main user interface and said 
stored user interface module in order to enable access by a user 
to said user interface module, subsequently exchanging between said 
decoder and said smart card parts of said information upon commands 
issued by said user through said user interface module. The invention 
also concerns a smart card and a video receiver implementing said 
method. The invention may for example be used in the frame of a 
digital television network. 
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Method and device for loading a user interface 

The invention relates to a method for loading a user interface in a 
5 television environment, in particular in a digital television system. The invention 
also concerns a device implementing said method, and an associated smart card. 
The invention may be used for example in conjunction with decoders in a 
conditional access television system. 

It is known to use microprocessor cards ("smart cards") in Pay-TV 
systems. Such cards contain various data, some of which may be accessed and 
eventually modified by the user. For example, a card may store the access rights 
to a list of programs. In some systems, this information is transmitted with the 
video data by the broadcaster, either in specific data packets in digital 
transmission systems, or modulated on the analog video signal's vertical blanking 
intenyal (VBI) in analog transmission systems. Once received, the data is stored in 
the card. A user may wish to consult this information, although he may not be able 
to modify it directly. Other examples of information stored on the card are parental 
access codes or personal passwords. Such information may be modified by users 
having the corresponding authorizations. 

Television decoders such as digital television decoders sold under the 
RCA brand for digital satellite reception in the United States are equipped with 
sophisticated user interfaces. User interfaces of this kind generally include a 
25 program guide and decoder feature programming tools, and make use of the 
graphical capabilities of the decoder to enhance user friendliness. The hierarchical 
sirijctura of the user interface is prc -etited to the user under th>-: form of a 
succession of menus, or under the form of a representation of a familiar 
environment such as a living room or a shopping mall. 

30 

The Unites States Patent 5.367.571 concerns a subscriber terminal 
with a plug-in expansion card, from which code is downloaded. 



15 



CONFIRMATIOW COPY 
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The PCT Patent application WO 94/14284 concerns a reprogrammable 
terminal in a television program delivery system, in vyhich menu templates are 
created and transmitted to the terminal for storage. 

5 The presentation of specific information to the user and/or the 

modification of this information by this user require that a part of the user interface 
be adapted to this information. With the evolution of services offered to the user, 
the nature of such information changes. The user interface may not always be 
adapted to process such new types of information. This is particularly true for 
10 information stored in a smart card, since such cards are by nature destined to be 
replaceable. Nev^f card versions may carry data concerning formerty unavailable 
services. 

The invention concerns a method for loading a user interface in a 
15 television system comprising a decoder and a removable smart card cooperating 
with said decoder, said decoder comprising a main user interface, said method 
being characterised in that' it comprises the steps of 

loading and storing by the decoder of the totality of a user interface 
module stored on said smart card, said user interface module comprising data 
20 structures making reference to information destined to a user, said information 
being stored on said smart card, 

- establishing by said decoder a relation between said main user 
interface and said stored user interface module in order to enable access by a 
user to said user interface module, 
25 - subsequently exchanging between said decoder and said smart card 

pails of said information upon commands issued by said user through said user 
interface module. 

By storing parameters and data on a smart card, along with a user 
30 interface module to manage these parameters and data, and by establishing a 
relation between the user interface of a decoder and the user interface module 
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Stored on the card, a flexible solution is provided to allow evolution of a user 

iiilerface. 



The invention moreover permits the adaptation of the user interface 
module to each user, according to the data and parameters stored on a specific 
user's card. 



The loading and storing of the user interface module is performed once 
and for all. No further loading of a part of the user interface module is necessary, 
e:xhanges with the smart card being limited (as far as the user interface is 
concerned) to that of parameter values. Access frequency and duration to the 
card's memor/ are consequently reduced during use of the user interface by the 
user. 



According to a variant of the embodiment of the invention, said step of 
loading and storing is performed upon the first detection by said decoder of the 
presence of a smart card in said smart card interface. 

Loading and storing of said module is thus performed as soon as 
possible when the decoder and card are functional, to free the decoder's and 
smart card's resources before interaction between the user and the decoder takes 
place. 

According to a variant of the embodiment of the invention, said step of 
establishing said relation between said main user interface and said user interface 
module comprises the step of identifying at least one entry point into said user 
interface modulo and in displaying to said user in said main user interface an 
access to said user interface module through said at least one entry point. 

According to a variant of said embodiment, said information stored in 
the smart card comprises user-defined data. 
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According to a variant of said embodiment, said user interface module 
is stored under the form of at least one linked list of objects. 

According to a variant of said embodiment, said at least one linked list 
5 of objects comprises a series of screens, at least one screen in each linked list 
comprising one of said entry points. 

According to a variant of said embodiment, said main user interface 
comprising a predetermined pointer to said at least one entry point, said step of 
10 establishing by said decoder a relation between said main user interface and said 
user interface module further comprises the step of allowing said user to activate a 
trigger to access said entry point only when said user interface module has been 
loaded. 

15 According to a variant of said embodiment, said step of establishing a 

relation between said main user interface and said user interface module further 
comprises the steps of: 

- loading from said smart card at least one object to be linked to an 
object of said main user interface. 

20 

In this particular case, the main user interface does not contain in 
advance any preprogrammed access means which are displayed to the user. 
When the user interface module is downloaded, the decoder searches for objects 
whose function it is to establish the bridge between the main user interface and 
25 the user interface module. These objects (a specific "button" or menu choice) is 
displayed to the user. 

The invention also concerns a smart card comprising a memory, a 
microprocessor and input/output means characterised in that it comprises data 
30 destined to a user, a user interface module to present said information to said user 
and data identifying bridges between said user interface module to a main user 
interface module of a device into which said smart card is inserted. 
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5 

The invention also concerns a video receiver comprising a main user 
interface, a memory, a memory card interface and a device for entenng user 
commands, characterised in that it comprises: 
5 - means for downloading the totality of a user interface module stored in 

a memory card inserted into said memory card interface, 

- a memory for storing said user interface module, 

- means for establishing a relation between said main user interface 
and said user interface module. 

10 

The invention will be better understood and other characteristics v/ill 
appear through the description of a non-limitative embodiment, illustrated by the 
figures among which: 

15 - figure 1 is a block diagram of a television decoder; 

- figure 2 is an example of a main menu of the decoder user interface; 

- figure 3 is a tree diagram of the structure of the user interface module 
stored on a smart card and 

- figure 4 is a flowchart indicating the main steps followed to integrate 
20 the user interface module into the user interface of the decoder according to the 

present embodiment. 

The embodiment will be described in relation with a digital television 
environment. The invention is of course not limited to such an environment and 
25 can easily be adapted to other applications. 

A decode.'- used in a digital television system is illustrated by figure 1. In 
such a system, video, audio and other data are transmitted in data packets. This 
decoder is connected to an antenna 1 for receiving a signal from a broadcasting 
30 station via a satellite (not shown). The signal is transferred in a known way to a 
tuner 2, a demodulator 3 and an error correction circuit 4. The demodulated and 
corrected data packets are then transferred to a demultiplexer 5. The role of the 
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demultiplexer 5 is to analyse the received data packets and to dispatch the 
content of these data packets to the appropriate applications. The demultiplexer 5 
is controlled by a microprocessor 23. which programs the packet filtering 
parameters of the demultiplexer. The format of data packets is for example the 
format given in the "MPEG 2 Systems" standard. 

Data packets, or parts thereof, which have been selected to be 
transferred to an application are stored in memory 6. The memory 6 contains a 
buffer zone for each application, in which data is written by the demultiplexer and 
read by the corresponding application. 

The term "application" is used to designate software as well as 
hardware applications. A software application is typically a program guide, which 
relies on information transmitted by a broadcaster to inform the user about 
upcoming events. Such an application is run by the microprocessor 23. Hardware 
applications include an audio decoder 16, a video decoder 17, a teletext decoder 
18 and a conditional access subsystem (7, 8, 9 and 10). 

The microprocessor 23 is connected to a ROM 12 and a RAM or 
reprogrammable ROM 19. Data from the buffer memory 6 may be transferred 
directly to the memory 19, on instruction by the microprocessor 23. 

The microprocessor is connected to an infra-red remote control 
interface 24, responding to signals from a remote control 11. The microprocessor 
also controls an on-screen display generation circuit 15, used to generate 
subtitles, menus and graphics. 

Another feature of the decoder is a modem 13, connected to the public 
switched telephone network (PSTN) 14. 

Video signals provided by video decoder 17, teletext decoder 18 or on- 
screen display generation circuit 15 are multiplexed by a multiplexer 20 under the 
control of microprccessr^r 23. Th^? multiplexer 20 outputs a video signal to 
conr^ectors connected to a video cassette recorder ^1 and a television 22, along 
with audio signals provided by audio decoder 16. 

The conditional access subsystem comprises a descrambler circuit 7, a 
verifier circuit 8. a smart card interface 9 and a removable smart card 10. Before 
being stored in buffer memory 6, scrambled data packets received by the 
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demultiplexer 5 are first descrambled by descrambler circuit 7, provided the user 
possesses the corresponding access rights. These access rights are stored in the 
smart card 10 and are updated by the broadcaster through specific data packets 
destined to the conditional access subsystem. The verifier circuit 8 manages all 
communication betv^'een the decoder and the smart card and controls the 
descrambler circuit. The verifier circuit 8 also verifies the authenticity of the smart 
card itself, for example using the Fiat-Shamir iterative algorithm. The 
communication with the smart card follov^s the well-known ISO 7816 protocol. 

The scrambling and descrambting process is the following: 
At the emitter side, the broadcasting entity scrambles the data packet 
payload according to a given scrambling technique using a given codeword. The 
scrambled data is transmitted in the appropriate data packets. The codeword is 
cyphered and also transmitted in data packets, called Entitlement Control 
Messages (ECMs). 

The codeword changes frequently, for example every few seconds or 

so. 

The broadcaster also transmits access rights to individual decoders or 
groups of decoders. The corresponding messages are called Entitlement 
Management Messages or EMMs. 

At the decoder side, the EMMs which correspond to a given decoder 
are filtered by the demultiplexer and transferred to the smart card. The smart card 
updates the corresponding access rights. 

When a scrambled service is received, the ECMs corresponding to that 
service are filtered and transferred to the smart card. The smart card checks 
whether the access rights it has stored authorize the access to that particular 
service. If the answer is yes, it decyphers the codeword of the ECM and transfers 
it to the descrambler circuit 7 through the verifier circuit 8. !f the answer is no, the 
microprocessor 23 is informed through verifier circuit 8, and a corresponding 
message is displayed to the user. 
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The memory 12 contains the necessary programs and data to generate 
a graphical user interface. The user interface of the decoder, which is launched by 
pressing a "Menu" button on the remote control 11. has according to the present 
embodiment a tree-like structure. 
5 Internally, this structure is represented using "User Interface Objects", 

or Ul objects. In the present embodiment, a Ul object is an object which may be 
displayed on the screen and which has the capacity to trigger a reaction by the 
microprocessor when activated by the user. This activation consists for example in 
pressing an "OK" button of the remote control 1 1 when an item in a menu on the 
10 screen is highlighted. An object defines how the user interface behaves following 
an activation of an item on the screen. 

The visual or graphical representation of the user interface structure 
(fonts, background graphics, etc.) will not be described in detail, except where 
necessary for the clarity of the description. 

15 

A linked list of objects is a group of objects in which an object may 
make reference to another object. For example, a particular link between a first 
and a second object may indicate that the second object should replace the first 
object on the screen if the first object is activated. Links of this kind enable the 
20 user to navigate from one object to another, following a series of predefined paths 
composed of links and objects. 

The resident user interface of the decoder is composed of one such 
linked list of objects or of several independent lists. 

25 

The syntax of the main user interface composed of linked lists of 
objects is the follovN/ing: 



30 



Main U I () { 

for(i^O;i<N;i^-^) UlListQ 

} 
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10 



15 



20 



25 



UlList 0 { 

for (i~0;i<NJ'^^) Screen () 

} 

Screen () { 
Trigger; 

ExplanatoryTextQ: 
for (i^O;i<N:h-^) ListQ 



List 0 { 

for (i^-0;i<N:i-^'i') ChoiceQ; 

for (i'0:i<N:i-^'^) VariableFieldQ; 

for (i-0'J<N:i^'^) InputFieldQ 



ChoiceQ { 

Explanator/Text (); 

DestinationScreenNumber; 

TriggerEvent 



VariableFieldQ { 
Explanator/Text Q; 
GetValueFunctionPointer 

} 

InputFieldQ { 

ExplanatoryText Q; 
ProcessValueFunctionPointer 

} 



} 
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ExplanatoryTextQ { 
data bytes 

} 

"MainUI" describes the whole decoder user interface, while "UlLlst" 
describes a list of linked objects. 

"Screen" describes a full screen to be displayed. To move to another 
screen, the user has to react. The screen number is the rank of the screen in the 
UlList. A screen is composed of several Lists. 

"Trigger^' specifies the predefined event which will trigger the display of 
the screen. The presence of a null trigger means that the screen may be accessed 
only from another screen. A trigger is non-null for entry-point screens (the main 
menu screen described below is one example of an entry-point screen). 

"List" describes a List area in a screen and its behaviour. A List is a 
composition of Choices, VariableFields and InputFields. A list may thus be a 
simple list of information such as a list of events, programs, etc. or it may be a 
menu in which the user may choose an option. 

"Choice'* describes a possible selection offered to the user and contains 
the destination screen to be displayed if this choice is activated. 

"VariableField" describes an area of a screen in which the value of a 
variable Is to be displayed. As an example, such a variable may be the title of an 
event or its duration, or a personal password. The structure also contains an 
explanatory text and a function call. As an example, the explanatory text for a 
password may be "Your Personal Password Is while the function call calls the 
subroutine destined to retrieve the value of the variable from where it may be 
stored. As far as the main user interface of the decoder is concerned, this is 
generally the memoiy 19. 

"InputField" describes an area of the screen where the user may or 
should enter a value which is then processed accordingly. Again, the structure 
includes an explanatory text as well as a function call which triggers the 
processing of the requested information and eventually its storage. 
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"DestinationScreenNumber" is the rank of a screen in the UlList. This 
parameter specifies a link from one screen to another, within a given linked list. 

"TriggerEvent" is a parameter which specifies whether a given linked 
list UlList should be exited to enter another linked list, or whether a given screen 
of a linked list may be called only from within that linked list. This parameter is 
used to leave one of the main user interface linked lists to enter a linked list of a 
user interface module. It defines the entry points into a linked list. 

"GetValueFunctionPointer" and "ProcessValueFunctionPointer" 
respectively point to a function which reads the value of a variable and a function 
which processes a value or more generally a user input- 
Each linked list may have several entry points, each point representing 
the beginning of a user interface session. 

Figure 2 illustrates the main menu screen of a user interface, when no 
smart card is inserted. Using the structures defined above, this screen 
corresponds to a "Screen" structure, with a Trigger which corresponds to a "Menu" 
button of the remote control. 

The title and the instructions are defined by Explanatory Text. 

The Screen possesses a single Menu with eight Choices (Program 
Guide, Attractions, Mailbox, Options, Alternate Audio, Conditional Access, Help, 
Exit). The Menu does not contain any VariableField or InputField. The 
DestinationScreenNumber of each Choice points to the appropriate submenu 
screen. 

The function associated with each input field reacts to the activation of 
a highlighted choice. The only authorized input in this case (except for direction 
kevs of course) is the "OK" coo'e of tlie correoponding remote control button. 

Choices Vv'hich are unavailable are tinted in grey. This is the case for 
the Conditional Access item of the Menu when no smart card is present in the 
decoder's smart card interface. 
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According to the invention, the smart card contains a user interface 
structure related to its functions, and in particular to the variables and parameters 
it contains. In the rest of the description, the user interface structure stored on the 
card will be designated using the terms "user interface module" or simply 
"module", the resident user interface of the decoder being referred to as the "main 
user interface". 

The main user interface does normally not contain structures adapted 
to the smart card parameters. 

The structure of the user interface module depends on factors such as 
the type of data carried by the smart card or the applications for which the smart 
card is used. 

In the present embodiment, the smart card is used in conjunction with 
the conditional access subsystem of the decoder and stores the entitlements 
mentioned above, as well as some user-defined information such as a series of 
passwords. 

According to the present embodiment, entitlements are given to a user 
on a per program basis for a given time period. The smart card stores the 
identification code of a program in a network, and the beginning and end of the 
authorized viewing period for each identified program. The user may recall the list 
of programs he has subscribed to (per mail or interactively using the return 
channel provided by the decoder) and the corresponding periods. 

The user may also wish to subscribe to a new program. 

Several types of passwords are implemented, giving access to some 
features of the decoder. 

A first password is the parental code or child lock. U?;ing this password, 
a menu listing all available programs is given, each program being marked as 
authorized or forbidden, 

A second password is necessary to access home shopping services. 
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Each password may be modified by a user knowing the current 

password. 

Lastly, help screens relating to the conditional access application are 

available. 

Figure 3 is a tree illustrating the user interface module screen structure 
corresponding to the information above. 

Using the objects defined above, this structure can be translated as 
described below. In all, there are ten different screens: 



- a conditional access main screen 25 with three choices; 

- a subscription screen 26 with a list and one choice; 

- a password menu screen 27 with two choices; 

- a help menu screen 28 with three choices; 

- a screen 29 to subscribe to a program; 

- a screen 30 to change the Child Lock Password; 

- a screen 31 to change the Home Shopping Password; 

- three help screens 32 to 34. 



The choices corresponding to "Exit" or "Go back to previous Screen" 
are not described. 



The objects corresponding to such a user interface module can be 



translated using the object structures defined earlier. One excerpt from the user 
interface module structure v;ill .now be given with some detail. 



This example concerns the access to the first screen of the osei 



interface module, i.e. the conditional access main screen. This example has been 
chosen because this screen is triggered by an event which is external to the user 
interface module (in this case, activation of an option in the main user interface of 
the decoder). 
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User/nterfaceModule () { 
ScreenList 

} 



[UlList type] 



ScreenList () { 

ConditionalAccessMainScreen 

ProgramListScreen 

PasswordMenuScreen 

HelpMenuScreen 

SubscriptionScreen 

ChildLockPasswordChaftgeScreen 

HomeShoppingPasswordScreen 

HelpScreen Topic 1 

HelpScreenTopic2 

IHelpScreen Topic3 

} 



[Screen 
[Screen 
[Screen 
[Screen 
[Screen 
[Screen 
[Screen 
[Screen 
[Screen 
[Screen 



type, rank 1] 
type, rank 2) 
type, rank 3] 
type, rank 4] 
type, rank 5] 
type, rank 6] 
type, rank 7] 
type, rank 8] 
type, rank 9] 
type, rank 10] 



ConditionalAccessMainScreen () { 
Trigger = 2 
ConditionalAccess is 



main user 



List1 



[when 



choice 



activated in main screen of 

interface]; 
[List type] 



List1 0 { 

MenultemSubscriptionQ 

MenultemPasswordQ 

MenultemHelpQ 



[Choice type] 
[Choice type] 
[Choice type] 
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MenultemSubscriptionQ { 

Text1 (); [Explanatory Text type] 

DestinationScreenNumber=2; 

} 



MenultemPasswordQ { 

Text2 (); [Explanatory Text type] 

DestinationScreenNumben=3 

} 



MenultemHelpO { 

Texts (); [ExplanatoryText type] 

DestinationScreenNumber^4 

} 

Text1() { 

"(1) Subscriptions" 

} 



Text2() { 

"(2) Passwords" 

} 

Text3() { 

"(3) Help Sc/'e<'Vn3" 



The screen of rank 1 is the entrance point into the user interface 
module. As such, the corresponding trigger (value 2) has to be implemented in the 
main user interface structure. 
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As has been said before, the null value for "Trigger" identifies screens 
which are not entry points into a user interface (be it the main user interface or a 
module). 

5 In addition to this null value, hine different values for the "Trigger" 

parameter are reserved to the user interface module. Only the screens of the user 
interface module may be triggered using these values. The screens of the main 
user interface may not be triggered using these values. 

10 The attribution of "Trigger" values is the follov^/ing: 

"0": The screen is not an entry point into the user interface 

"1": The screen will be called by the smart card only 

"2" to "9": The screen will be triggered by a predefined event of 

15 the main 

user interface 
"10" to "255";Other uses 

Among the last values, some values may be affected to other user 
20 interface modules in a similar manner as for the conditional access user interface 
module of the present embodiment. 

The integration of the user interface module into the main user interface 
25 is made according to the process described below and illustrated by the flowchart 
of figure 4. 

According to the present embodiment, the integration takes place either 
when the smart card is inserted into the smart card interface or when the decoder 
30 is turned on and detects the card's presence. The detection of the insertion or 
presence of the card is made in a known way by polling the state of a switch 
located in the slot of the card interface and triggered by the card's edge. 
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The decoder then requests the transfer of the entire user interface 
module structure, which is stored in memory 19. Transferring the entire structure 
at once reduces the amount of data to be transferred when the user actually 
5 navigates in the user interface. Data exchange with the smart card is then limited 
to reading and writing parameters and variables, instead of also transferring user 
interface structure information. Reduction of the amount of data exchange is 
important to improve system response times to user commands because smart 
card interfaces are often serial interfaces with data transfer rates limited to a few 
10 kilobauds por second. 

To facilitate the exchange of data relating to the user interface module, 
the data structures mentioned above are coded under a Type, Length and Value 
format (TLV format), where: 

15 

- "Type*' is a byte indicating the type of a structure; 

- "Length" is a two-byte word giving the length of the "Value" field and 

- "Value" is a series of data bytes in conformance with the data 
structures given above. The Value field of a TLV structure may include one or 

20 several TLV structures. 



The "Type" values used are the following: 





UserlnterfaceModule 


00 


25 


UlList 


01 




Screen 


02 




Menu 


03 




Choice 


04 




VariableField 


05 


30 


InputField 


06 




Explanatory Text 


07 
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Once the user interface module structure has been transferred, the 
decoder checks which trigger values are contained in the screens of the module. It 
then makes a list of the possible entry points into the module screens. In this 
particular embodiment, there is only one trigger value (i.e. 2) defining an entry 
5 point into the user interface module, since the only authorized access is through 
the Conditional Access Main Screen. Of course, more than one entry point may be 
defined. 



The decoder checks v^hich Choice structures of the main user interface 
10 (or of a previously integrated module) make reference to the trigger values 
defining an entry point into the module which has been loaded. In this particular 
case, this is the Choice structure corresponding to the "Conditional Access" item 
in the main user interface main menu. This Choice may from now on be activated 
by the user. 

15 

Once the user interface module has been integrated into the main user 
interface, the communication of parameters and values of variables between the 
decoder and its main user interface and the smart card is made using two 
dedicated functions: CardRetrievalFunction and CardWriteFunction. A specific 

20 pointer is associated with each function. The program code for each function is 
stored in the smart card and executed by the smart card's microprocessor. Code 
execution is triggered by the decoder by sending a function pointer along with the 
appropriate data to the card. The functions have a role simitar to that of the 
"GetValue" and "ProcessValue" functions described above, except that in this 

25 case, the data is not stored in the decoder's internal memory but in the smart 
card's memory. 

To obtain for example the current value of a password, the decoder 
sends the pointer "CardRetrievalFunctionPointer" as a command to the smart 
card, along with a pointer identifying the variable whose value is to be retrieved. 
30 The Card Retrieval Function is called whenever an object structure of 

the Variable Field type is encountered in a screen to be displayed. 
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To write a password value to the card, the decoder sends the 
"CardWriteFunctionPointer'* as a command to the smart card, along with a pointer 
identifying the variable whose value is to be written to the card, and the new value 
of this variable. 

5 The function pointers and variable pointers are part of the data 

transferred from the smart card to the decoder when the module structure is 
transferred. 



When a screen is to be displayed, the decoder will call the Card 
10 Retrieval function as many times as required to fill the variable fields on the 
display with the proper values. According to a variant of the present embodiment, 
the function calls requesting the value of a variable field are made only when all 
other elements of a screen have been displayed. According to another variant of 
the present embodiment, a function call requesting the value of a variable field 
15 from the card is made for at least some of these fields only when the user 
activates the corresponding object on the screen. This applies for example to data 
which is seldom needed by the user, and increases the overall display speed of 
the user inteiface screens. 

20 According to the embodiment described above, the main user interface 

is conceived to comprise the objects which are potential bridges to the user 
interface module to be integrated. The manipulation of such objects by the user is 
limited until the integration of the module has taken place. 

25 According to a variant of said embodiment, the main user interface 

does not include such objects in advance. In this case, the smart card not only 
contains the stru.-ture of the user interface module, but also the structure of 
several objects which wiil enable the user to access this module once ifiiegrated 
into the main module. 

30 When the decoder downloads the module structure from the smart 

card, it also transfers the further structures, which make reference to the 
structures of the main user interface. 
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In the first embodiment, the option "Access Control" was displayed in 
the main menu of the decoder's main user interface, although this option was not 
available before the integration of the user interface module. According to the 
further embodiment, this option does not exist in the main user interface. The 
structure of "Choice" type corresponding to this option is stored on the smart card. 
The smart card also contains information indicating that this "Choice" structure is 
to be inserted into the Menu structure of the main user interface, thus adding the 
option to the list of items of the main user interface's main menu. 

According to a third embodiment, said main user interface and said 
user interface module are called by the user using separate commands or keys. In 
this case, there is no need to have an option of the main user interface giving 
access to the screens of the module. The user interface module may then be run 
in parallel with the main user interface. The relation established between the main 
user interface and the module is then limited to freeing access, by the main user 
interface, to the module once it is loaded. 
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CLAIMS 

1. Method for loading a user interface in a television system comprising 
a decoder and a removable smart card cooperating with said decoder, said 
decoder comprising a main user interface, said method being characterised in that 
it comprises the steps of 

- loading and storing by the decoder of the totality of a user interface 
module stored on said smart card, said user interface module comprising data 
structures making reference to information destined to a user, said information 
being stored on said smart card, 

- establishing by said decoder a relation betvween said main user 
interface and said stored user interface module in order to enable access by a 
user to said user interface module, 

- subsequently exchanging between said decoder and said smart card 
parts of said information upon commands issued by said user through said user 
interface module. 

2. Method according to claim 1, characterised in that said step of 
loading and storing is performed upon the first detection by said decoder of the 
presence of a smart card in said smart card interface. 

3. Method according to claim 1 or claim 2, characterised in that said 
step of establishing said relation between said main user interface and said user 
interface module comprises the step of identifying at least one entry point into said 
user interface module and in displaying to said user in said main user interface an 
access to said user intsi-face modLi!,-^ tluough said at least one entr/ point. 

4. Method according to one of the claims 1 to 3, characterised in that 
said information comprises user-defined data. 
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5. Method according to one of the claims 1 to 4. characterised in that 
said user interface module is stored under the form of at least one linked list of 
objects. 

5 6. Method according to claim 3 and claim 5, characterised in that said 

at least one linked list of objects comprises a series of screens, at least one 
screen in each linked list comprising one of said entry points. 

7. Method according lo claim 3. characterised in that, said main, user 
10 interface comprising a predetermined pointer to said at feast one entry point, said 

step of establishing by said decoder a relation between said main user interface 
and said user interface module further comprises the step of allowing said user to 
activate a trigger to access said entry point only when said user interface module 
has been loaded. 

15 

8. Method according to claim 3, characterised in that said step of 
establishing a relation between said main user interface and said user interface 
module further comprises the steps of: 

- loading from said smart card at least one object to be linked to an 
20 object of said main user interface. 

9. Smart card comprising a memory, a microprocessor and input/output 
means characterised in that it comprises data destined to a user, a user interface 
module to present said information to said user and data identifying bridges 

25 between said user interface module to a main user interface module of a device 
into which said smart card is inserted. 

10. Video receiver comprising a main user interface, a memory (19), a 
memory card interface (9) and a device for entering user commands (11, 24). 

30 characterised in that it comprises: 

- means (9, 23) for downloading the totality of a user interface module 
stored in a memory card inserted into said memory card interface, 
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- a memory (19) for storing said user interface module, 

- means (23) for establishing a relation between said main user 
interface and said user interface module. 

11. Video receiver according to claim 10, characterised in that it 
implements the method of one of claims 1 to 9. 
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